Plaintext Password in Settings.ini of CesarFTP

From: Andreas Constantinides (megahzat_private)
Date: Tue May 20 2003 - 00:25:56 PDT

Next message: Matt Zimmerman: "Re: bazarr slocate"

Previous message: Claes Nyberg: "Maelstrom exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Cesar FTP v0.99g (latest version)
an FTP Server by http://www.aclogic.com/
it saves the ftp password in file: 
c:\Program Files\CesarFTP\settings.ini
in plaintext:

....
Password= "lalala"
Login= "megahz"
Name= "megahz"
....


Discovered by MegaHz
www.megahz.org
megahzat_private
www.cyhackportal.com

Next message: Matt Zimmerman: "Re: bazarr slocate"
Previous message: Claes Nyberg: "Maelstrom exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue May 20 2003 - 08:51:49 PDT